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1. INTRODUCTION 

Conditional logics have a long history. They have been studied first by Lewis 
([Lewis 1973; Nute 1980; Chellas 1975; Stalnaker 1968]) in order to formalize a 
kind of hypothetical reasoning (if A were the case then B), that cannot be cap- 
tured by classical logic with material implication. 

In the last years, interesting applications of conditional logic to several domains 
of artificial intelligence such as knowledge representation, non-monotonic reasoning, 
belief revision, representation of counterfactual sentences, deductive databases have 
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been proposed ([Crocco et al. 1995]). For instance, in [Grahnc 1998] knowledge and 
database update is formalized by some conditional logic. Conditional logics have 
also been used to modclizc belief revision ([Gardenfors and Rott 1995; Lindstrom 
and Rabinowicz 1992; Giordano et al. 1998; 2002]). Conditional logics can provide 
an axiomatic foundation of non-monotonic reasoning ([Kraus et al. 1990]), as it 
turns out that all forms of inference studied in the framework of non-monotonic 
(preferential) logics are particular cases of conditional axioms ( [Crocco and Lamarrc 
1992]). Causal inference, which is very important for applications in action planning 
([Schwind 1999]), has been modelled by conditional logics ([Giordano and Schwind 
2004]). Conditional Logics have been used to model hypothetical queries in deduc- 
tive databases and logic programming; the conditional logic CK+ID is the basis of 
the logic programming language defined in [Gabbay et al. 2000]. In system diag- 
nosis, conditional logics can be used to reason hypothetically about the expected 
functioning of system components with respect to the observed faults. [Obcid 2001] 
introduces a conditional logic, DL, suitable for diagnostic reasoning and which al- 
lows to represent and reason with assumptions in model-based diagnosis. Another 
interesting application of conditional logics is the formalization of prototypical rea- 
soning, that is to say reasoning about typical properties and exceptions. Delgrande 
in [Delgrande 1987] proposes a conditional logic for prototypical reasoning. 

Finally, an obvious application concerns natural language semantics where con- 
ditional logics are used in order to give a formal treatment of hypothetical and 
counterfactual sentences as presented in [Nutc 1980]. A broader discussion about 
counterfactuals can be found in [Costello and McCarthy 1999]. 

In spite of their significance, very few proof systems have been proposed for 
conditional logics: we just mention [Lamarre 1993; Delgrande and Groeneboer 1990; 
Crocco and del Cerro 1995; Artosi et al. 2002; Gent 1992; dc Swart 1983; Giordano 
et al. 2003]. One possible reason of the underdevelopment of proof- methods for 
conditional logics is the lack of a universally accepted semantics for them. This is 
in sharp contrast to modal and temporal logics which have a consolidated semantics 
based on a standard kind of Kripke structures. 

Similarly to modal logics, the semantics of conditional logics can be defined in 
terms of possible world structures. In this respect, conditional logics can be seen as a 
generalization of modal logics (or a type of multi-modal logic) where the conditional 
operator is a sort of modality indexed by a formula of the same language. 
The two most popular semantics for conditional logics are the so-called sphere 
semantics ([Lewis 1973]) and the selection function semantics ([Nute 1980]). Both 
are possible-world semantics, but are based on different (though related) algebraic 
notions. Here we adopt the selection function semantics, which is more general 
than the sphere semantics. 

Since we adopt the selection function semantics, CK is the fundamental system; 
it has the same role as the system K (from which it derives its name) in modal logic: 
CK-valid formulas are formulas that are valid in every selection function model. 

In this work we present a sequent calculus for CK and for three standard exten- 
sions of it, namely CK+ID, CK+MP 1 and CK+MP+ID. This calculus makes use 
of labels, following the line of [Vigano 2000] and [Gabbay 1996]. To the best of our 



1 This conditional system is related to modal logic T. 
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knowledge, this is the first calculus for these systems. Some tableaux calculi were 
developed in [Giordano et al. 2003] and in [Olivetti and Schwind 2000] for other 
more specific conditional systems. 

Our goal is to obtain a decision procedure for the logics under consideration. For 
this reason, we undertake a proof theoretical analysis of our calculi. In order to 
get a terminating calculus, it is crucial to control the application of the contraction 
rule. This rule allows for duplicating a formula in a backward proof search and 
thus is a potential source of an infinite expansion of a branch. Generally speaking, 
the status of the contraction rules varies for different logical systems: in some 
cases, contraction rules can be just removed without losing completeness, in some 
others they cannot be eliminated, but their application can be controlled in such 
a way that the branch expansion terminates. This is what happens also for our 
conditional logics. In other cases, contraction rules can be eliminated, but at the 
price of changing the logical rules, as it happens in [Hudclmaicr 1993]. 

In this work, we show that the contraction rules can be eliminated in the calculi 
for CK and CK+ID. In this way, the calculus not only provides a decision proce- 
dure, but it can also be used to establish a complexity bound for these logics (the 
decidability for these logics has been shown in [Nute 1980]). Roughly speaking, 
if the rules are analytic, the length of each branch is bounded essentially by the 
length of the initial sequent; therefore, we can easily obtain that the calculus give 
a polynomial space complexity. 

For CK+MP and CK+MP+ID the situation is different: contraction rules cannot 
be eliminated without losing completeness. However, we show that they can be used 
in a controlled way, namely it is necessary to apply the contraction at most one 
time on each conditional formula of the form x : A =>• B in every branch of a proof 
tree. This is sufficient to obtain a decision procedure for these logics. 

It is worth noting that the elimination of contractions is connected with a re- 
markable property, the so-called disjunction property for conditional formulas: if 
(Ai =>• jBi) V (A 2 => B 2 ) is valid, then either (Ai =3> B{) or (A 2 =3- B 2 ) is valid too. 

As a difference with modal logics, for which there are lots of efficient implementa- 
tions ([Beckert and Posegga 1995], [Fitting 1998], [Beckcrt and Gore 1997]), to the 
best of our knowledge very few theorem provers have been implemented for condi- 
tional logics ([Lamarre 1993] and [Artosi et al. 2002]). We present here a simple 
implementation of our sequent calculi, called CondLean; it is a Prolog program 
which follows the lean methodology ([Beckert and Posegga 1995], [Fitting 1998]), in 
which every clause of a predicate prove implements an axiom or rule of the calculus 
and the proof search is provided for free by the mere depth-first search mechanism 
of Prolog, without any ad hoc mechanism. We also present an alternative version 
of our theorem prover inspired by the tableau calculi for modal logics introduced 
in [Beckert and Gore 1997]. 

The plan of the paper is as follows: in section 2 we introduce the conditional sys- 
tems we consider, in section 3 we present the sequent calculi for conditional systems 
above. In section 4 we analyze the calculi in order to obtain a decision procedure 
for the basic conditional system, CK, and for the three mentioned extensions of it. 
In section 5 we present the theorem prover CondLean. In section 6 we discuss some 
related work. 
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2. CONDITIONAL LOGICS 

Conditional logics are extensions of classical logic obtained by adding the condi- 
tional operator =>•. In this paper, we only consider propositional conditional logics. 
A propositional conditional language C contains the following items: 

- a set of propositional variables ATM; 

- the symbol of false _L; 

- a set of connectives 2 

We define formulas of C as follows: 

- _L and the propositional variables of ATM are atomic formulas; 

- if A and B are formulas, A — > B and A B arc complex formulas. 

We adopt the selection function semantics. We consider a non-empty set of 
possible worlds W. Intuitively, the selection function / selects, for a world w and 
a formula A, the set of worlds of W which are closer to w given the information A. 
A conditional formula A => B holds in a world w if the formula B holds in all the 
worlds selected by f for w and A. 

A model is a triple: 

M = (W,f,[]) 

where: 

- W is a non empty set of items called worlds: 

- f is the so-called selection function and has the following type: 

/: W x 2 W — ► 2 W 

- [ ] is the evaluation function, which assigns to an atom P 6 ATM the set of 
worlds where P is true, and is extended to the other formulas as follows: 

* [JL] = 

* [A -> B] = (W- [A]) U [B] 

* [A B]={w G W | /(to, [A]) C [B]} 

Observe that we have defined / taking [A] rather than A (i.e. f(w,[A]) rather 
than f(w,A)) as argument; this is equivalent to define / on formulas, i.e. f(w,A) 
but imposing that if LA] = [A ] in the model, then f(w, A)=f(w, A ). This condition 
is called normality. 

The semantics above characterizes the basic conditional system, called CK. An 
axiomatization of the CK system is given by: 

- all tautologies of classical propositional logic. 

A A^B 

- (Modus Ponens) 

- (RCEA) 



B 
B 



(A^C)^{B^ C) 



2 The usual connectives T, A, V and -i can be defined in terms of _L and 
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(iiA...AA n )^B 



(RCK) 



B) 



(C Ai A . . . A C =► An) -> (C 

Other conditional systems are obtained by assuming further properties on the se- 
lection function; we consider the following three standard extensions of the basic 
system CK: 



System 


Axioms 


Model condition 


CK + ID 


A=> A 


fix, [A])C[A] 


CK + MP 


(A =► B) -»• (A B) 


w e [A] -> w e f(w, [A]) 


CK + MP + ID 


(A^B)^(A^ B), 
A^A 


u; g [A] -> w g /(w, [A]), 
/(*, c [A] 



3. A SEQUENT CALCULUS FOR CONDITIONAL LOGICS 

In this section we present SeqS. a sequent calculs for the conditional systems intro- 
duced above. S stands for {CK, ID, MP, ID+MP}; the calculi make use of labels 
to represent possible worlds. 

We consider a conditional language C and a denumerable alphabet of labels A, 
whose elements are denoted by 2, y, z, .... 
There are two kinds of formulas: 

(1) labelled formulas, denoted by x: A, where x G A and A G C, used to represent 
that A holds in a world x; 

(2) transition formulas, denoted by x — ► y, where x, y £ A and A G C. A 
transition formula x — > y represents that y G f(x, [A]). 

A sequent is a pair (T, A), usually denoted with T h A, where T and A are 
multisets of formulas. The intuitive meaning of T h A is: every model that satisfies 
all labelled formulas of V in the respective worlds (specified by the labels) satisfies 
at least one of the labelled formulas of A (in those worlds). This is made precise 
by the notion of validity of a sequent given in the next definition: 

Definition 3.1 Sequent validity. Given a model 

M = (W, f, [ ]} 

for C, and a label alphabet A, we consider any mapping 

I :A^W 

Let F be a labelled formula, we define M. |=/ F as follows: 

- M \=i x: A iff I(x) G [A] 

- M K x y iff I(y) G f(I(x), [A]) 

We say that T h A is valid in A4 if for every mapping I : A — * W, if Ai \=i F 
for every F G T, then M. \=j G for some G G A. We say that T h A is valid in a 
system (CK or one of its extensions) if it is valid in every M. satisfying the specific 
conditions for that system (if any). 



In Figure 1 we present the calculi for CK and its mentioned extensions. 
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(AX) r,F h A,F 

r h a 



(A_L) r.i:lhA 

r h a 



(WeakL) 



(ContrL) 



(-> R) 



(EQ) 



r, f h a 
r, F, F h A 

r,F h a 

r , x : A \- x : B , A 
r h x : A -» B, A 

u : A h u : B u 



(WeakR) 



(ContrR) 



(-1) 



r h a,f 

T h A, F, F 

r h a, f 

Fhx:A,A V,x : B h A 



B h tl : A 



r, a: > y h a: > y, A 



r h 



■ J/, A r. y : B h A 



T, I : A => B h A 
T,y : A h A 



(=>R) 



y\-y:B,A 



rhi:A=>B,A 



fe0T,A) 



(ID) 



r,x 3/ h A 



(MP) 



rhi:A,A 



ThiAiA 



Fig. 1. Sequent calculi SeqS; the (ID) rule is for SeqID and SeqID+MP only; the (MP) rule is for 
SeqMP and SeqID+MP only. 



(AL) 


T, x : A, x : B h A 


(AR) 


rhA,i:A rhA,i:B 


r,i:AABhA 


r h A,x : A A B 


(VL) 


r,i:AhA r,i:BhA 


(VR) 


T h A,x : A,x : B 


r, x : A V B h A 


T h A,x : A V B 


(-L) 


T h A,x : A 


(-R) 


V,X : A h A 


F,x : ->A h A 


rhA,i:-.A 


(AT) 


T h A,x : T 







Fig. 2. Additional axioms and rules in SeqS for the other boolean operators, derived from the 
rules in Figure 1 by the usual equivalences. 



Example 3.2. We show a derivation of the (ID) axiom. 

y.AVy.A 



c — > v H y ■ A 

h x : A =>■ A 



(ID) 
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Example 3.3. We show a derivation of the (MP) axiom. 

x : A h x : A, x : B 

(MP) 



A 

A\- x — > x.x : B x : A. x \ B \- x : B 

■ ' (=*•£) 

x : A =>■ B,x : A\- x : B 

: (- R) 

x: A=^B\-x: A—yB 

(- R) 



h x : (A=> B) -> (A B) 

In the following, we will need to consider the permutability of a rule over another 
one 3 . It is easy to observe the following Lemma: 

Lemma 3.4 Permutability of the rules. All the SeqS's rules permute over 
the other rules, with the exception of (=> L), which does not always permute over 
(^R). 

In particular, it does not permute over (=> R) which introduces the label y used to 
apply (=>■ L), as shown in the following counterexample in SeqCK: 

y : B,y: C,x yh y : B 

A A A (AL) 

x — ► t/hi — > y,y : B y : B /\C,x — > yV y : B 

A ( ^ L) 

x : A=^ (B h C), x y\- y: B 

— (=► R) 

x : A^ (B A C) h x : A^ B 

The application of (=> L) with x, the only available label, leads to a proof which 
fails: 

x : B, x : C, x -—> y h y : B 

A , A (=> R) 

x^y\-y:B,x^x x : B,x : C h x : A ^ B V ' 

R > (AL) 



\-x:A^B,x^x x : B A C h x : A B 



i:i^(BAC*)hi :J 4^B 
If A, B and C are atoms, neither of the two branches can be closed. 

The sequent calculus SeqS is sound and complete with respect to the semantics. 

Theorem 3.5 SOUNDNESS. IfT \- A is derivable in SeqS then it is valid in the 
corresponding system. 

Proof. By induction on the height of a derivation of T h A. As an example, we 
examine the cases of (=> R) and (MP). The other cases are left to the reader. 

- (=>- R) Let r h A, x : A B be derived from (1) L, x — > y h A,y : B, where 
y does not occur in T, A and it is different from x. By induction hypothesis 



3 In general, we say that a rule r\ permutes over a rule T2 if the following condition holds: if they 
are both applicable to a sequent r h A and there is a proof tree where T2 is applied to T h A 
and n is applied to one of the premises of T2, then there exists a proof tree of V h A where ri is 
applied to the sequent T h A and T2 is applied to one of the premises of r\. 
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we know that the latter sequent is valid. Suppose the former is not, and that 
it is not valid in a model M. = (W, /, [ ]}, via a mapping /, so that we have: 

M |=z F for every F G I\ M F for any F G A and M ^/ x : 

A^B. 

As M Y=i x : A => B there exists w G f(I(x), [A]) — [£>]. We can define an 
interpretation /'(z) = I(z) for z ^ y and /'(y) = u>. Since y does not occur in 
r, A and is different from x, we have that M. \=i> F for every F G V, M Y=p F 

for any F G A, A4 f=p y : B and M. \=p x — ► y, against the validity of (1). 

- (MP) Let rhA,i -^-> x be derived from (2) T h A, x : A. Let (2) be valid 
and let M. = (W, /, [ ]) be a model satisfying the MP condition. Suppose that 
for one mapping I, A4 \=i F for every F G L, then by the validity of (2) 
either A4 \=i G for some G G A, or M. \=j x : A. In the latter case, we have 

I{x) G [A], thus I(x) G f(I(x), [A]), by MP, this means that |=j x x. 

□ 

Completeness is an easy consequence of the admissibility of cut. By cut we mean 
the following rule: 

L h A, F F, L h A 

(cut) 

T h A 

where F is any labelled formula. To prove cut admissibility, we need the following 
lemma about label substitution. 

Lemma 3.6. If a sequent T h A has a derivation of height h, then T[x/y] h 
A[x/y] has a derivation of height h, where T[x/y] h A[x/y] is the sequent obtained 
from T h A by replacing a label x by a label y wherever it occurs. 

Proof. By a straightforward induction on the height of a derivation. 

□ 

Theorem 3.7 Admissibility of cut. IfY V- A, F and F,T h A are derivable, 
so T h A. 

Proof. As usual, the proof proceeds by a double induction over the complexity of 
the cut formula and the sum of the heights of the derivations of the two premises 
of the cut inference, in the sense that we replace one cut by one or several cuts on 
formulas of smaller complexity, or on sequents derived by shorter derivations. We 
have several cases: (i) one of the two premises is an axiom, (n) the last step of one 
of the two premises is obtained by a rule in which F is not the principal formula 4 , 
(Hi) F is the principal formula in the last step of both derivations. 

(i). If one of the two premises is an axiom then either L h A is an axiom, or the 
premise which is not an axiom contains two copies of F and T h A can be obtained 
by contraction. 

4 The principal formula of an inference step is the formula introduced by the rule applied in that 
step. 
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(ii). Wc distinguish two cases: the sequent where F is not principal is derived 
by any rule (R), except the (EQ) rule. This case is standard, we can permute (R) 
over the cut: i.e. we cut the premise(s) of (R) and then we apply (R) to the result 
of cut. If one of the sequents, say V h A, F is obtained by the (EQ) rule, where F 
is not principal, then also T h A is derivable by the (EQ) rule and we are done. 

(Hi). F is the principal formula in both the inferences steps leading to the two 
cut premises. There arc six subcases: F is introduced by (a) a classical rule, (b) by 
L), (=> R), (c) by (EQ), (d) F by (ID) on the left and by (EQ) on the right, 
(e) by (MP) on the left and by (EQ) on the right, (/) by (ID) on the left and by 
(MP) on the right. The list is exhaustive. 

(a) . This case is standard and left to the reader. 

(b) . F = x : A B is introduced by (=>• R) and (=> L). Then wc have 

(*)r,i^zhz:B,A rhi^f/,A r,y:BhA 

R) {=> L ) 

rh x : B,A T,x : A^ Bh A 
(cut) 

rh A 

where z does not occur in T, A and z/i; By Lemma 3.6, we obtain that T, x — > 
y h y : B, A is derivable by a derivation of no greater height than (*); thus we can 
replace the cut as follows 

rhi y, A 

(WeakR) 



T\-x — >y, A, y : B T, x — >yhy:B,A 

(cut) 

T\-A,y:B T,y:BhA 
(cut) 

rh A 

The upper cut uses the induction hypothesis on the height, the lower the induction 
hypothesis on the complexity of the formula. 

(c). F = x — y is introduced by (EQ) in both premises, we have 

(5) u : A h u : B (6) u : B h u : A (7) u : B h u : C (8)u:Chu:B 

(EQ) — — (EQ) 



r', x — > y h x y, A F,x — — > i/ h i — > y, A' 

r',i-^?/hi^j;,A' 



(cut) 



A C 

where F = T , x — ► y, A = x — ► y, A'. (5)- (8) have been derived by a shorter 
derivation; thus we can replace the cut by cutting (5) and (7) on the one hand, and 
(8) and (6) on the other, which give respectively 

(9) u : A h u : C and (10) u : C h u : A. 

A C 

Using (EQ) we obtain r , x — > y h A', x — -> y 

(d). F = x -—>■ y is introduced on the left by (ID) rule, and it is introduced on 
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the right by (EQ). Thus we have 

u:A\-u:B u : B b u : A T', x —>■ y,y : B\- A 

(EQ) — - (ID) 



r', x — > y h A, x y x y, T' , x — > y h A 

r', x -^-> yh A 



(cut) 



where T — T',x — > y. By Lemma 3.6 and weakening, the sequent T',x — y,y : 
A b y : _B, A can be derived by a derivation of the same height as u : A b u : B. 
Thus, the cut is replaced as follows 

E', x y, y : A b y : £?, A V, x y, y : B b A 

(cut) 



r',z -^-> y,y : A b A 
r', a; — > y, a; y b A 



(ID) 

(ContrL) 



(ej. F = x — > a; is introduced on the left by (MP) rule, and it is introduced on 
the right by (EQ). Thus we have 

T\-x:A,A' u:A\-u:B u : B b u : A 

(MP) (EQ) 



r b A', x — x T,x — > x b A', x — 



(cut) 



where A = A', x — x. By Lemma 3.6 and weakening, the sequent T, x : A \- x : 
B, A can be derived by a derivation of the same height as u : A b u : B. Thus the 
cut is replaced as follows: 

r h j: : A, A' T,x : A b A',x : B 

(cut) 

T h A',x : B 
—(MP) 

rhA',x^i 

({). F = x > x is introduced on the right by (MP) rule and on the left by (ID). 



Thus we have 



rhx:A,A r,i:4hA 

(MP) (ID) 



r b a, x — x r, x — ih a 
r b a 

We replace this cut by the following: 

Thai: A A r,i:4hA 



(cut) 



r b A 



(cut) 



Theorem 3.8 Completeness. If A is valid in CK {+MP}{+ID}, then b x : A 
is derivable in the respective SeqS system. 
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Proof. We must show that the axioms are derivable and that the set of derivable 
formulas is closed under (Modus Ponens), (RCEA), and (RCK). A derivation of 
axioms (ID) and (MP) is shown in examples 3.2 and 3.3 respectively. 
Let us examine the other axioms. 

For (Modus Ponens), suppose that b x : A — > B and b x : A are derivable. We 
easily have that x : A ^ B,x : A\- x : B is derivable too. Since cut is admissible, 
by two cuts we obtain \- x : B. 

For (RCEA), we have to show that if A <-> B is derivable, then also (A C) <-> 
(B C) is so. The formula A <-» B is an abbreviation for (A — > B) A (B — > A). 
Suppose that b x : A — > B and b x : B — > ^4 are derivable, we can derive x : B =>• 
ChiiA^-Cas follows: (the other half is symmetrical). 

a; : j4 b a; : B x : B b x : A 

(EQ) 



x —* y b x — > y,y : C x -^-> y,y:CVy:C 

B ^ L) 

x > y.x : A => C b y : C 



For (RCK), suppose that (1) b x : A i?2 ■ • • A B n — > C, it must be derivable also 
x : Bi, . . . , x : B n b x : C. We set T t = x : A =>• Sj, a; : A =>• ■ • : A => S n , 

yl A 

for 1 < i < n. Then we have (we omit side formulas in x — ► y b x — ► y): 



x — —> i/hi — —> y x : B\ , . . . , x : £>„ hi:C 
a; — ► y, x : A i?„,x : Si,. ..,x : B„_i b y : C 



i^yhi^i/ x ^ y,T 2l y : Bx\- y : C 

x y,x : A B 1; x : A=$* B 2 ,. . . ,x : A=> B n \- y : C 
x : A=> Bi,x : A=> B 2 ,. . . ,x : A=> B„ \- x : A ^ C 



(=> L) 



□ 



4. PROOF-THEORETICAL ANALYSIS OF SEQS 

In this section we analyze the sequent calculus ScqS in order to obtain a decision 
procedure for our conditional systems CK, CK+ID, CK+MP and CK+MP+ID. 
In particular, we show that the contraction rules (Contr L) and (Contr R) can 
be eliminated in SeqCK and SeqID, but they cannot in SeqMP and SeqID+MP; 
however, in the last two systems one can control the application of these rules, in 
order to get a terminating calculus. Using the contraction rule in a controlled way 
is essential to prove the existence of a decision procedure for the associated logics; 
in fact, without this control, one can apply contraction duplicating arbitrarily any 
formula in the sequent. 

First of all, we prove that we can eliminate the weakening rules. 

Theorem 4.1 Elimination of weakening rules. Let Y b A be a sequent 
derivable in SeqS. Then T b A has a derivation in SeqS with no application of 
(Weak L) and (Weak R). 
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Proof. By induction on the height of the proof tree. 

□ 

Now we introduce the notion of regular sequent. Intuitively, regular sequents are 
those sequents whose set of transitions in the antecedent forms a forest. As we show 
in Theorem 4.4 below, any sequent in a proof beginning with a sequent of the form 
h xq : D, for an arbitrary formula D, is regular. For this reason, we will restrict 
our concern to regular sequents. 

We define the multigraph Q of the transition formulas in the antecedent of a 
sequent: 

Definition 4.2 Multigraph of transitions Q. Given asequentT h A, where 
r = r', T and T is the multiset of transition formulas and V does not contain tran- 
sition formulas, we define the multigraph Q =< V, E > associated to T h A with 

vertexes V and edges E. V is the set of labels occurring in T F A and < x,y >G E 
p 

whenever x ► y G T . 

Definition 4.3 Regular sequent. A sequent Y F A is called regular if its 
associated multigraph of transitions Q is a forest. In particular, there is at most 
one link between two vertexes and there are no loops. 

We can observe that we can always restrict our concern to regular sequents, since 
we have the following theorem: 

Theorem 4.4 Proofs with regular sequents. Every proof tree beginning 
with a sequent h xq : D and obtained by applying SeqS's rules, contains only regular 
sequents. 

Proof. First, we show that Q is a graph, i.e. there is at most one link between 
two vertexes. This can be seen by an easy inductive argument: hio:fl obviously 
respects this condition. Consider an arbitrary r h A which respects this condition, 
(=>• R) is the only rule of the calculus which introduces, looking backward, a tran- 
sition formula in the antecedent of the sequent to which it is applied. In particular, 

(=>■ R) with principal formula x : A B introduces a transition x y where y is 

p 

a "new label", then there cannot be another transition x — > y in the antecedent. 
To see that Q is a forest, again we do a simple inductive argument: the graph as- 
sociated to h xq : D is certainly a forest {Q=<{xq},% >, which is a tree); consider 
a rule application which has T\ F Ai and T2 F A2 as premises and T h A as 
a conclusion, and assume by induction hypothesis that the graph Q associated to 
r h A is a forest. It is easy to observe that applying any rule of SeqS, the graphs 
Qx and G2, associated to Ti h Ai and T2 h A2 respectively, are forests. (Contr L), 

(Contr R), (Weak L), (Weak R), L), (-> L), (-> R) and (MP) do not modify 

p 

the graph Q; (=>■ R) adds a transition x — > y in the initial forest, but y is a "new" 
label as discussed above, thus Q\ is still a forest obtained by adding a new vertex 
and a new edge; consider the (ID) rule: 

T,w : A h A 

— — ™ 

T,x y h A 
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The application of (ID) deletes the edge < x, y > from Q, and Q\ is still a forest. 
When (EQ) is applied, the calculus tries to find two derivations starting with only 
one label u and no transitions; therefore, Q\ and Qi are trees <{u}, >. 

□ 

As mentioned above, we restrict from now on our attention to regular sequents. In 
the following, we prove some elementary properties of regular sequents. 

Theorem 4.5 Property of (=> L). Let the sequent 

T b A, x y 

with x ^ y, be derivable in SeqS, then one of the following sequents: 

(1) r h a 

(2) x y b x — > y, where x — —> y E T 
is also derivable in SeqS . 

Proof. (EQ) is the only ScqS's rule which operates on a transition formula on the 
right hand side (consequent) of a sequent. Thus, we have to consider only two 

cases, analyzing the proof tree of T b A, x — > y: 

(1) x — > y is introduced by weakening: in this case, T b A is derivable; 

A . F 

(2) x — ► y is introduced by the (EQ) rule: in this case, another transition x — ► 
y must be in T, in order to apply (EQ). To see this, observe that the only rule 
that could introduce a transition formula (looking backward) in the antecedent 

of a sequent is (=>• R), but it can only introduce a transition of the form x — > 

z, where z does not occur in that sequent (it is a new label), thus it cannot 

p 

introduce the transition x — ► y. 



The (EQ) rule is only applied to transition formulas: 
u: F\- u : A u : A\- u : F 



F A 

x — ► y r x — ► y 



(EQ) 



F A 

therefore we can say that x — > y b x — > y is derivable in SeqS. 



□ 



Notice that this theorem holds for all the systems SeqS, but only if x ^ y. In 
SeqMP and SeqID+MP the (MP) rule operates on transitions in the consequent, 

A 

although on transitions like x — > x. In this case the theorem does not hold, as 
shown by the following counterexample: 

x : A h x : A, x : B 

A (MF) 

x : A b x — ► x, x : B 

for A and B arbitrary. The sequent x : AV x — > x, x : B is derivable in SeqMP, 
but x : A b x : B is not derivable in this system and the second condition is not 
applicable (no transition formula occurs in the antecedent). 
The first hypothesis of the theorem (x ^ y) excludes this situation. 
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Theorem 4.6 Elimination of the contraction rules on transition formulas. 
Given a sequent T h A, derivable in SeqS, there is a proof tree with no applications 
of (Contr L) and (Contr R) on transition formulas. 

Proof Consider one maximal 5 contraction of the proof tree: it can be eliminated 
as follows. 

In SeqCK a transition formula x — ► y can be only introduced by the (EQ) rule 
(looking forward): 

u: B\- u : A u: A\~u: B 

(EQ) 



p" 5 u a" a a 
r , x — > y \~ A , x — > y, x — ► y 



ni 

r h A , x — > y, x — > y 
(ContrR) 

T h A\x-^ y 



We can obtain the following proof erasing the contraction step: 

u : u: A u : A\- u : B 

{EQ) 

r" B u a" a 
r , x — ► y h A , x — > y 

T h A',x^ y 

1 A 

where LTj is obtained by removing an occurrence of x — > y on the right side of 
every sequent of ill . 

In SeqID and SeqID+MP we can have proofs like the following one: 



n 3 

r"\ y: A h A" 



r'", x y h A'' 



(ID) 



n 2 



r , x — —* u, y: A h A 
T , a; — ► a; — >■ y h A 



n 



r , a: — * w, a; y h A 
(ContrL) 

T,x y h A' 



5 Of maximal distance from the root of the proof tree. 
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By the permutability of (ID) over the other rules of SeqS, we can have: 

n 3 

r'",y: A h A'" 

n; 

T',y: A, y: A h A' 
— (ID) 

r',v:i,^«hA 

— -IT T - {ID) 

r , x — ► y, x — > y h A 

— (ContrL) 

V',x y h A' 

where IIj is obtained from ITi and II2 by permuting the two applications of (ID). 
We can then eliminate the contraction on the transition formula, introducing an 
application of (Contr L) on the sub formula y: A: 

n 3 

T'",y: A h A'" 

n; 

T',y: A, y: A h A' 

, , (ContrL) 

r ,y. Ah A 

— ^ r(^) 

r , a; -— ► i/h A 

In SeqMP and SeqID+MP we can eliminate a contraction step on a transition 

A 

formula x — — > x in the consequent of a sequent by replacing it with an application 
of (Contr R) on the subformula x: A in a similar way to the case of (ID). 
In all the SeqS calculi, if a transition formula is introduced by (implicit) weakening, 
the contraction is eliminated by eliminating that weakening. 

□ 

4.1 Elimination of (Contr R) on Conditional Formulas 

In this subsection we show that SeqS calculi are still complete without the (Contr 
R) rule applied to conditional formulas x: A => B. The elimination of the right con- 
traction on conditionals is a direct consequence of the so-called disjunction property 
for conditional formulas: if (A\ B\) V (A2 =4> B2) is valid, then either (A\ =>■ B%) 
or (A 2 B2) is valid too. This property follows an important proposition, which 
does not hold for all sequents, but only for non-x-branching sequents, i.e. those 
sequents which do not create a branching in 1 or in a predecessor of x. Let us 
introduce some essential definitions. 

Definition 4.7 Predecessor and successor, father and son. Given a se- 
quent r , T b A, where all the transitions in the antecedent are in T , we say that 
a world w is a predecessor of a world x if there is a path from w to x in the graph 
of transitions Q =< V, E > of the sequent. In this case, we also say that x is a 
successor of w. If < w,x ><E E, we say that w is the father of x and that x is a 
son of w. 
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Fig. 3. The forest Q of a sequent; w is predecessor of x, x is successor of vi, u is father of x and x 
is son of u. 

As we mentioned above, the graph of transitions forms a forest, as shown in Figure 
3. 

Definition 4.8 Positive and negative occurrences of a formula. Given 
a formula A, we say that: 

- A occurs positively in A; 

- if a formula B — > C occurs positively (negatively) in A, then C occurs positively 
(negatively) in A and B occurs negatively (positively) in A; 

- if a formula B => C occurs positively (negatively) in A, then C occurs positively 
(negatively) in A. 

A formula F occurs positively (negatively) in a multiset V if F occurs positively 
(negatively) in some formula G G V . 

Now we introduce the definition of .T-branching formula. Intuitively, B(x,T) con- 
tains formulas that create a branching in x or in a predecessor of x according to 

T. B{x, T) also contains the conditionals u : A => B such that T h u — > v and B 
creates a branching in x (i.e. v = x) or in a predecessor v of x. 

Definition 4.9 x-branching FORMULAS. Given a multiset of transition for- 
mulas T, we define the set of x-branching formulas, denoted with B(x, T), as 
follows: 

- x:A^Be B(x,T); 

- u:A^B(zB(x,T)ifThu x for some formula F ; 

- u:A^Be B(x,T) if T h u v and v: B G B(x,T). 

We also introduce the notion of ^branching sequent. Intuitively, we say that 
r h A is x-branching if it contains an a;-branching formula occurring positively 
in r or if it contains an .T-branching formula occurring negatively in A. Since in 
systems containing (ID) a transition u — > v in the antecedent can be derived from 
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' F 

v : F and v : F can be x-branching, we impose that a sequent T , u — ► v h A is x- 
branching if T , v : F h A is x-branching; for the same reason, in systems containing 

(MP) we impose that a sequent T h A , u — > u is x-branching if T h A , u : F is 
x-branching. 

In systems containing (MP) we also impose that a sequent r,w:A^>BhAis 

' A 

x-branching if the sequent T h A, w — > w is derivable and w is a predecessor of x 
(or w = x), since w : A can introduce x-branching formula(s) in the sequent. 

Definition 4.10 x-branching sequents. Given a sequent T h A, we denote 
by r the labelled formulas in T and by T the transition formulas in T, so that 
T—T , T . To define when a sequent T h A is x -branching according to each system, 
we consider the following conditions: 

(1) a formula u : F 6 B(x,T) occurs positively in V; 

(2) a formula u : F 6 B(x,T) occurs negatively in A. 

(3) T=T , u — ► v and the sequent T ,T ,v : F h A is x-branching; 

F ' 1 F 

(4) u — > u € A and the sequent T h A , u : F is x-branching (A = A , u — ► u); 

(5) a formula w:A=$-B£T,wisa predecessor of x in the graph Q of transitions 

it A " 

or w = x and T h A, w ► w is derivable, where T = T ,w : A => B . 

We say that T h A is x-branching for each system if the following combinations of 
the previous conditions hold: 

- CK: 1, 2 

- CK+ID: 1,2, 3 

- CK+MP: 1, 2, 4, 5 

- CK+MP +ID: 1, 2, 3, 4, 5 

The disjunction property characterizes only the sequents that are not x-branching. 
To prove the disjunction property, we need to consider a more general setting; 
namely, we shall consider a sequent of the form T \- A,y : A, z : B, whose forest of 
transitions has the form represented in Figure 4, i.e. it has one subtree with root 
u and another subtree with root v, with y is a member of the tree with root 

u and z is a member of the tree with root v\ x is the father of u and v and the tree 
containing x has root r. 

We need some more definitions. In particular, given a sequent T h A with its 
associated forest Q =< V,E >, consider a label k contained in the tree with root 
r. We define the set T£ of the labels contained in the tree of Q with root k and the 
sets T£ and A£, containing all the formulas of V and A whose labels are in the tree 
of Q with root k. We also define the set T£ of the labels contained in the tree of 
Q with root k or in a path from r to k, and the sets T* k and A£, containing all the 
formulas of T and A whose labels are in the tree of Q with root k or on the path 
from r to k. 

Definition 4.11 T£. XJ? is the set of labels in the tree of Q with root k; more 
precisely: 

- k G T£ 
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Fig. 4. The forest Q of transitions used to prove the disjunction property. 

- if < U,w > G E and u <E T£ , then w G T£ . 

Definition 4.12 Tt- is the set of labels in the tree of Q with root k or on a 
path from r 6 to k; more precisely: 

T£ = T°UP k 
where P k it the set of labels on a path from r to k: 

- keP k 

- if < u,w > G E and w G P k , then u G P k . 

Definition 4.13 T° k . T° k is the multiset of formulas ofT contained in the tree 
of G with root k; if w — > k G T, then w — —> k G more precisely: 

r° ={u -.FeT\ueT°}[j{w- F ^uer\weT°orueT°} 

Definition 4.14 A£. A£ is the multiset of formulas of A contained in the tree 

F F 

of Q with root k; if w — ► k G A, then w — > k G A£; more precisely: 

A° ={u :FeA\ueT°}U{w^ueA\w<ET°orueT°} 

Definition 4.15 T k . T k is the multiset of formulas ofT contained in the tree 
of Q with root k or on a path from r to k; more precisely: 

Y% = {w : F G r | w G T fe *} U {w w G T | w G T*} 

Definition 4.16 A£. A£ is the multiset of formulas of A contained in the tree 
of Q with root k or on a path from r to k; more precisely: 

A* = {w : F G A | w G T*} U {w w G A | w G T*} 
Now we have all the elements to prove the following: 

6 Thc label r is the root of the tree containing k. It could be r=k. 
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Proposition 4.17. Given a sequent T h A, y : A, z : B and its forest of transi- 
tions Q, if it is derivable in SeqS and has the following features: 

(1) Q is a forest of the form as shown in Figure 4 ( thus y is a member of the tree 
with root u and z is a member of the tree with root v, with u ^ v; u and v are 
sons of x); 

(2) r h A, y : A, z : B is not x-branching 

then one of the following sequents is derivable in SeqS: 

(1) r; h A*,y. A 

(2) T* v ^A* v ,z:B 

(3) r - (r° ur;)hA- (A° u a°) 

Moreover, the proofs of 1, 2 and 3 do not add any contraction to the proof of 
r h A, y : A, z : B. 

Proof. By induction on the height of the proof tree of the sequent r h A, y : A, z : B. 
We present two examples, the other cases are left to the reader. 

(1) Consider the case where y : A is a conditional formula y : C => D and is the 
principal formula of an application of the (=> R) rule. The proof tree of the 
sequent is ended by: 

T,y k h A, ft : D,z : B 

— ' ' H R) 

TV- A,y:C D,z : B 

We can apply the inductive hypothesis on the only premise of the (=> R) rule; 
in fact, T, y — ► k h A, ft : D, z : B is not x-branching. It could become x- 

Q 

branching as an effect of the introduction of k : D and y — ► ft, but this is 
impossible since k is a "new" label, then it is in the same tree of y and not 
on a path to x. Applying the inductive hypothesis, we must consider the three 
possible situations: 

c c 
(a) (T, y — ► ft)* h A* , k: D is derivable: it is easy to see that y — > k 6 (T, 

y — > ft)*, since u is a predecessor of y and thus of ft; then we obtain the 



following derivation: 



,y^khA* u ,k:D / 

> R) 



T* u \-A* u ,y:C^D 



(b) (r, y — > ft)* h A*, z: B is derivable: k is in the tree with root u, thus y 

c c 
— > k £ (r, y — ► ft)*: we obtain that 



is derivable; 
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(c) (T, y-2+ k) - {{V, y fe)° U(r,^^)hA- (A° U A°) is derivable: 

c c 

fc is in the subtree with root u, thus y — ► G (r, ?/ — ► and then ?/ 

k g" (T, y k) - ((r, 2/ k)° u U (T, y -^U k)°), from which we 
obtain that 



r-(r°ur°)h a-(a^ua°) 

is derivable. 

(2) Let us now analyze the case where the principal formula of the sequent is a 
formula w : F G A; the (Contr R) rule is applied to that formula, as shown 
below: 

T h A' , w : F, w : F , y : A, z : B 

— - - (ContrR) 

Th A ,w: F,y : A, z : B 

We can obviously apply the inductive hypothesis on the premise, obtaining the 
three following alternatives: 

(a) r* h (A', w: F, w: F)* u , y: A is derivable: if w G T*, then the sequent T* 
h A* , w: F, w: F, y: A is derivable, as w: F occurs in (A , w: F, w: F)*. 
Therefore we can obtain the following proof: 

K^A':,w:F,w:F,y:A 

; (ContrR) 

T* u \-A:,w:F,y:A 

and that's it, since A=A , w: F and then A*=A U *, w: F. 
If w T*, w: F is not member of the multiset (A , w: F, w: F)*, then 
the sequent T* h A*, y: A is derivable by the inductive hypothesis, from 
what we can conclude since A=A , w: F and then A*=A U *. 

(b) r* h (A ,w : F, w : F )*, z : B is derivable: the proof is similar to the 
previous one and r* h (A , w : F )*, z : B is derivable . 

(c) r - (r° U h (A', w: F, w: F) - ((A', w: F, w: F)° U (A', w: F, w: 
F)°) is derivable: if w G T° U T°, then r - (r° U T°) h A' - (A^° U A^°) 
is derivable, and we can conclude the proof as A=A , w: F, but w: F G 
A° U A°, then it is not member of the difference, thus A - (A° U A°)=A' 

- (a:° u a'°). 

If w: F £ T° U T°, then T - (T° u U T°) h (A', w: F, w: F) - (A' u ° U A„°) 
is derivable by the inductive hypothesis, from what we can have: 

r - (r° u r°) ha' - (a' u ° u a;°), w ■. f, w ■. f 

j ; ; (ContrR) 

r-(r:ur;)hA-(A;uA;), TO :F 

and we can conclude the proof, since A=A , w: F and w $ T° U T°; then, 
we observe that A - (A° U A°)=A' - (A'° U A' v °), w: F. 
In this case, we introduce a (Contr R) to prove the Proposition; however, 
this contraction is already in the proof tree of the initial sequent, thus we 
do not add any contraction on it (we use the same contraction on w : F). 
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□ 

Theorem 4.18 DISJUNCTION property. Given a non x -branching sequent 

r h A,x : Ax B u x : A 2 => B 2 
derivable in SeqS with a derivation II, one of the following sequents: 

(1) T h A, x : At ^Bi 

(2) r h A, x : A 2 => B 2 

is derivable in SeqS by a proof tree which does not add any application of the con- 
traction rules (Contr L) and (Contr R) toll. 

Proof. The sequent V h A, x : A\ =>■ Bx, x : A 2 =>• B 2 is derivable in SeqS, then 
we can find a derivation II of it; the two conditional formulas can be introduced 
(looking forward) in two ways: 

(1) by weakening; 

(2) by the application of the (=> R) rule. 

In case 1 suppose that x: A\ =>■ B\ is introduced by weakening (by Theorem 4.1 
we can only consider implicit weakenings): the proof is ended by erasing all the 
instances of x: A\ => B\ introduced by weakening in II, obtaining a proof of T b 
A, x: A 2 => B 2 . 

In case 2 both the conditional formulas are introduced by an application of the (=>■ 
R) rule; by the permutability of this rule over all the others, we can consider a 
proof tree ending as follows: 

T, x — 1 -+ y. x — ^ z h A, v : B\ , z : Bo 

-{=>R) 

T,x^y\-A,y:B 1 ,x:A 2 ^B 2 

(=> R) 

r h A, x : Ax =*> B u x : A 2 B 2 

The sequent T,x — ^> y, x z \- A,y : Bx, z : B 2 respects all the conditions to 
apply the Proposition 4.17 (y and z are "new" labels), then we have that one of 
the following sequents: 

(1) (r, x A> y f x *L> z) * h A;, y: Bx 

(2) (r, x y, x z)* z h A*, z: B 2 

(3) (r, x y, x ^ z) - ((T, x y, x z)° y U (T, x -^h y, x 2 )°) |- A 
- (A° U A°) 

is derivable in SeqS without adding any application of the contraction rules. 
In all these cases we can proof the disjunction property: 

(1) z is not in the tree with root y, and is not on a path towards y, then the transi- 
tion formula x — ^> z is not member of the multiset (T, x — L -> y, x — ^> z)*\ the 
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sequent R*, x — > y h A*, _Bi is then derivable, from what we have a proof: 

— (=> R) 

r^h A*x:Ai =^B l / 

— (Weak) 

T h A,x : Ai => Bi 

since T* C T and A* C A; 

(2) symmetric to the previous case; 

(3) we can observe that x — L -> y G (r, x — ^» y, x —^> z)°, and that x — z G 

(r, x — l -+ y, x z)°; both the transition formulas are members of (r, x 

— 1 -> y, x z)° U (r, x — L -+ y, x —^r z)° and then they are not members 

of (r, x y, x — ^ z ) - ((R x -A a; -A z)° U (r, x y, x — ^ z)°). 
Therefore, the sequent r - (F° U T°) h A - (A° U A°) is derivable and, ob- 
serving that T - (r° U T°) C T and that A - (A° U A°) C A, we have the proof: 

r-(r°ur°) h A - (A° u a°) 

— — (Weak) 

r h a 

(WeakR) 



T h A,x : A x B x 



or 



r- (r° ur°) h A — (A° u a°) 

(Weak) 

r h A 

(WeakR) 



rhA,i:4 2 ^B 2 



□ 



By the correctness and completeness of SeqS, it is easy to prove the following 
corollary of the disjunction property: 

Corollary 4.19. If (A =>■ B) V (C =>■ D) is uaftd m Ci^+MP} {+/£>}., then 
either A^BorC^Dis valid m CK{+MP}{+ID} . 

Finally, we can prove the eliminability of the (Contr R) in SeqS systems on 
conditional formulas as another corollary of the disjunction property. 

Corollary 4.20 Elimination of the (Contr R) rule on conditional formulas. 
If \- xq : D is derivable in SeqS, then it has a proof where there are no right con- 
tractions on conditional formulas. 

Proof. By permutation properties, a proof n ending with 

V h A,x : A^ B,x : A^ B 

can be transformed into a proof IT, where all the rules introducing a> branching 
formulas are permuted over the other rules (i.e. they are applied at the bottom of 
the tree). As an example, let the end sequent of H have the form 
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T, x : C -> D h A, x : A =>- B, x : A => B 

We have that the lower sequent is x-branching, (at least) since x : C — > D. Wc 
can permute II so that the last step is the introduction of the x-branching formula 
x : C — ► D from the two sequents: 

T h A, x : C, x : A => B, x : A => B and T, x : D h A, x : A => B, x : A => B. 

We have decomposed the x-branching formula, if the two sequents are still x- 
branching we perform a similar permutation upwards, so that at the end every 
branch of II' will contain a sequent I\ h A,, a; : A B,x : A => B, such that 
Tj, Aj are no longer x-branching. Notice that if a sequent r, w : C => D h A, x : 
A => B, x : A => B is x-branching because of w : C => D, we can permute (=> 
L) over the other rules, since w; is a predecessor of x in the tree of transitions (see 
the definition 4.10 above): the label used to decompose the conditional formula is 
already in the sequent, then the permutation is possible 7 . Then we can apply the 
disjunction property and obtain that for each i, 

T{ h Aj, x : A =>■ B is derivable. 

Thus, deleting one occurrence of x : A =>• B in the consequent of any sequent in II' 
below Ti h Aj, x : A B,x : A B we get a derivation of T h A, x : A =>■ _B. 

□ 

4.2 Elimination of Contractions in SeqCK and SeqID 

In this subsection we show that we can eliminate the application of contraction 
rules in SeqCK and SeqID systems. 

Theorem 4.21 Elimination of contractions in SeqCK and SeqID. Given 
a sequent h xq : D, derivable in SeqCK or in SeqID, it has a derivation with no 
applications of (Gontr L) and (Contr R). 

Proof (Sketch). As we proved above, we do not have to consider the case of (Contr 
R) applied to conditional formulas and contractions on transitions. The proof 
proceeds similarly to the one of Theorem 9.1.1 in [Vigano 2000] by triple induction 
respectively: (i) on the number of contractions in a proof of the sequent, (ii) on the 
complexity of the formula involved in a contraction step, and (iii) on the rank of 
the contraction; we need the following two definitions: 

Definition 4.22 Complexity of a formula cp(F). We define the complex- 
ity of a formula F as follows: 

(1) cp (x : A) = 2*\ A\ 

(2) cp (x y) = 2*\ A \ +l 

where \ A \ is the number of symbols occurring in the string representing the formula 
A. 



7 As explained, (=> L) does not permute over the application of (=t- R) which introduces the label 
used by (=> L). 
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Definition 4.23 Rank of a contraction. We define the rank of a contrac- 
tion as the largest number of steps between the conclusions of a contraction and 
an upward sequent containing at least one of the two copies of the formula that is 
contracted. 



For example, given the following proof tree: 

B.x: B 

(- R) 



n 

r, x: A, x: A h A, x : B, x : B 



T,x : AY- A, as : B.x : A -> B 

: : H R) 

r h A,x : A -> B. x : A -> B 

(ContrR) 

T h A, a; : A -> S 

the rank of the contraction applied to x : A — > B is 2 (the minimum rank available), 
since there are two sequents between the conclusion of the (Contr R) rule and the 
first sequent in which there are no instances of the constituent of the contraction. 

The third induction, on the rank, is needed since the rule (=> L), which does 
not permute over the (=>- R) rule: we cannot assume that there is a proof which 
introduces the two copies of the conditional formulas by (=>■ L) rule one after the 
other (this happens when the introduction of the first copy is separated by the 
introduction of the second copy by (=> R) rule occurring in the middle) and we 
need to consider separately the two cases. 

To carry on the proof, suppose that a derivation II of h Xq : D contains i + 1 
contractions. Concentrate on a maximal instance of contraction, say on a formula 
F (so that the portion of the derivation above this step is contraction- free). In 
order to eliminate this contraction step, thereby obtaining a proof II' that contain i 
contractions, we proceed by induction on the complexity of F, and then by induction 
on the rank of the contraction step. We only sketch the proof of the most difficult 
case, the one of a left contraction on a conditional formula x : A B; the other 
cases are easy and left to the reader. One can find the entire proof in [Pozzato 
2003]. 

We consider proof trees where (=>■ L) is applied as follows: 



X -—> t/hi y r,!/:BhA 
r,x : A B h A 



(=> L) 



In fact, no rules in SeqCK and SeqID introduces (looking forward) a transition 

formula x — ► x in the consequent of a sequent, then we can also apply the Theorem 
4.5 to all the applications of (=> L). 
Given the following proof: 



IIi 

A =>■ B, x: A => B h A 



T, x: A => B 

n 

h x : D 



{ContrL) 



we can obtain a proof II* of the sequent R x: A =>■ B h A, removing that contraction 
on x : A => B. 
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By induction on the rank of the contraction, we have the following cases: 

(1) Base: rank=2: we have the following proof: 



A A A A in 
x > 111 h i > w x > y, x > w, Fi, y: B, w: B h Ai, y: B , w: B 

■ ; (=► L) 



A A A A i/i 
x > y h x — > y Fi , x : A i?, y : B, x ► i/, x > w h Ai ,y : B ,w : B 

A A in 

T\,x : A B,x : A B,x — > y,x — ► w h Ai,y : B ,w : B 



A A in 
Ti, x : A B, x > y, x > w h A±,y : B ,w:B 



(ContrL) 



A i ii ii 

T\,x:A^-B,x — > y H Ai, y : B ,x : A =>■ B 
ri, x: A B h Ai, 3;: A' => B', a;: A" B" 

n 5 

hi : r> 



Notice that in 11,4, and IT^ there are no applications of (Contr L) on 

a' a' in. 

x : A^> B. \i x — > y, x — > w, Ti, y: B, w: B h Ai,y : B ,w : B is not 

a' a" 

x-branching, then we can apply the Proposition 4.17 to x — ► y, x — > w, Ti, 
y: B. w: B h Ai, y: B , w: B , obtaining that one of the following sequents 
is derivable: 

(a) (ri, x y, x — ► w, y: B, w: B)* y h A*^, y: B 

(b) (ri, x -^-> y, x w, y: B, w: B)* w h A* lw , w: B" 

(c) (ri, x y, x -^-f w, y: B, w: B) - ((r 1; x -^-> y, x -^-> w, ?/: 5, w: S)° 
U (Tx, x 2/, z ^ w, y: B, w: B)°J h Ax - (A° y U A?J 

We observe that x — » y and Z? are both members of (Fx, a; j/ } x — > 
w, B, w: S)*, whereas they are not members of the multiset (Yi, x y, 

x > w, y: B, w: B)* w ; vice versa for the formulas x ^— » w and w: 5. Then 
we have that one of the following sequents is derivable: 

(a) r* ly ,x^y,y:B\-A* ly ,y:B' 

(b) r* lw ,x^w,w:BhA{ w ,w:B" 

(c) Tx - (Tf s u r?j h Ax - (a;„ u a?j 

In each of these cases, we can obtain a proof without adding any contraction: 
(a) we have the following proof: 

ACM Transactions on Computational Logic, Vol. V, No. N, Month 20YY. 



26 



Nicola Olivetti et al. 



n 

A 



C ~^ — — — - & '" » B - Weak) 



x y \~ x -^-y y T x ,x y,y : B h Ai,y : B 
; ; (=> L) 

T u x ~^y,x : BY- A u y : B 
(Weak) 

A a" ' " 

Ti,x — ► y, x — ► w,x : A =>• B h Ai,y : B ,w:B 
; (=> R) 



T lt x : A => B,x y h A 1 ,y : B' ,x : A" => B 



Ti, i: A ^ 5 h Ai, i: 4 ^> B , x: A => B 
TT* 

h a; .' -D 

(b) symmetric to the previous case; 

(c) in this case, we obtain: 



— (=> i?) 



n° 

£i - (rf„ u rf j h Ar - (a;„ u Ajj 
ri ha. 



Ti, x: 4 5 h Ai, a;: A =^B, a;: A => £? 
TT* 
h x Q : D 



{Weak) 
- {Weak) 



If x — > y, x ^— > y, Ti, y: B, w: B h Ai, y: B , w: B is x-branching. we can 
permute all the rules introducing x-branching formulas over the others of the 
subtree II in a similar way to the proof of the disjunction property. We then 

a' a" 

apply the Proposition 4.17 to the non ^-branching sequcnts r^, x — > y, x — > 
W,y : B,w : B h An,y : B ,w : B , obtaining a derivation for one of the 
following: 

(a) T* liy , x 1 • y, //: B A* liy , y: B 

(b) T* liw , x ^ w, w: B h A^ u , w: B" 

(c) r u - (r° liy u r° Uw ) h a u - (A° liy ua;,j 

In each case (proceeding as in the previous case) we can obtain a proof of the 

A A in 

sequents Tu,x — ► y,x — ► a),i:4=>Bh &-u,y ■ B ,w : B . Be 11" the 
proof obtained by permuting the rules introducing x-branching formulas in JJ^; 

A a" 

reapplying all the rules of 11" to the sequents r^ , x — > y, x — ► w, x: A => B 
h An, y: B , w: B , removing from the antecedent of each sequent an instance 
of y : B and w : B and adding an occurrence of x : A => B, we have a proof 
n°° of the sequent: 

A A in 

Y\ 1 x — ► y, x — > w,x : A => B \- A\,y : B ,w : B 
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from which wc can obtain: 



n°° 

A A in 

r 1; x — ► y, x — ► w, x: A => B h Ai, y: B , w: B 

; ; — R) 

ri,x -^-> y,x : A B h Ai,y : B ,x : A" => b" 

; ; 7, -(=> R ) 

Ti, x: A=> BV- Ai, x: A => B , x: A => B 

n 

h x : D 



(2) Inductive step: rank>2: the situation is as follows: 



x - — ► fflh x ► W x ► w, T2, w: B h A2 

7, (=*■ L ) 

x -^-> w, T 2 , x: 4 => B h A 2 



x — ► i/h 1 — > y x — > 2/, Ti, 2/: B, x: A ^ B V- Ai 
; (=> i) 

i^!/,ri,i:i^5,i:i=^5l-Ai 

— - (ContrL) 

a; — ► y, Ti, x: A => B h Ai 

n 



We proceed in order to reduce the rank of the contraction and then apply the 
inductive hypothesis; we have the following two subcases: 
a" 

(1) x — ► w G Ti: in this case Hp is not empty, (otherwise rank=2). we can 
permute the upper (=> L) over the rules in II/), reducing the rank; 

a' 

(2) the transition formula x — > w is introduced by (=>■ R) in Tip, then we have 
a proof like: 
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n B He 

x — ► w h x — ► w x — > w. To, w: B h A? 

7, (=► L ) 

a; -^-> w, T 2 , 1: i ^ B h A 2 



x ic, rl, x: BY- Al, w: S 



— (=> i«) 
r 2 , ri^fih A 2 , x: A => B 

a; y h a: — y x -^-> Ti, y: 5, a:: j4 i? h Ai 
; (=> i) 

.t y,TuX : A => B,x : A B h Ax 

— ! (ContrL) 

x^-+ y, V x , x: A =$> B h A x 

n 

h x : D 

II^, could be empty: if it is not, we can easily diminish the rank of the contrac- 
tion by permuting the upper (=>■ L) over the rules of H D ; then, we consider the 
most difficult case that IT^, is empty. We observe that: 



(a) x, y and w are all distinct; 

(b) x: A B is not a subformula of y: B, as a; is a predecessor of y; it is 
necessarily a subformula of a formula in T\ or in Ai. 



We can divide the subtree IT D in two subproofs, II ^ and n^, such that 11^ 

A q nil, 

introduces y: B and x — ► y , whereas the formula x: A => B is used as a 
premise of a rule in n^. Due this separation, we can permute (=> R) over the 



8 If n^j is empty, we have that y: B and x — » y arc both in ITi. 
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lowest (=> L), obtaining the following proof: 

x J —> w h x w x > w, r 2 , y: B h A2 

J) (=*" L ) 

a; -^-» w, r 2 , 1: i ^ B h A 2 

a; — > w, r 2 , x: .A =>• B h A 2 , u>: fi" 

a' a a a" " 

x — ► y h x — ► y x — ► y, x — ► w, V*, y: B, x: A => B h A 2 , u>: £? 

; ^ L ) 

x -^-> y, x w,T*l,x : A B,x : A B \- A5,w : b" 

— - (=*> R) 

a' >/ » 

x Pf, 1; i4B,i:A4Bh AJ, x: A => £? 

tt'o 

x — > w, TV x: A =>■ B, x: A => B h Ai 
— ■ (ContrL) 

x-^> y, I\, x: A => B h A x 

n 

h x : D 

Now we can permute (=>- R) over the contraction rule, obtaining the tree: 



n B n 



E 

II II 

x — > w h x — » w x - — > w, T2, y: B h A2 

- (=*• L ) 

x w, r 2 , 1: i ^ B h A 2 

x w, r 2 , ri^Bh A 2 , u>: j9" 

a' a a' a' 7 

.t — ► y h x — ► y x — ► y, x — ► it>, r*, ?/: B ? x: A ^ B \- A|, w.' 5 

; : (=*" L ) 

x -^-> y, x -^-> io, FT, x : A B, x : A => B h to : s" , AT 

1— — - — (ContrL) 

x y,x w.T^x : A=> B \- w : B" ,£! 

— — — (=► R) 

x y, Tl, x: A^ BY- A\, x: A" B" 

tt'o* 

I 

x y,Ti,x:A=>B\-A 

n 

h x : D 
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in which the subtree LT^* is obtained by deleting an occurrence of x : A => B 

a' 

in every sequent descending from x — ► y, V*, x : A B,x : A =>■ B \- A*, x: 
A" => B" in Il'g. 

In this way, the rank of the contraction is diminished and we can apply the 
inductive hypothesis. 

□ 

4.3 Bound for the Application of (Contr L) in SeqMP and SeqID+MP 

In SeqMP and SeqID+MP we cannot completely eliminate the application of the 
left contraction rule on conditional formulas x : A =>■ B; for example, the following 
sequent: 

x : T =S> (B A -.(T => B)) h 

is valid in CK+MP, but it can only be derived in SeqMP by applying the (Contr 
L) rule on the conditional formula x : T => (B A ->(T L?)), as follows: 

y:B,y:^(J=>B),...)-v.B 

(AL) 



— !-> y, ... H x — !-* y, ... y : B A -.(T B), ... h y : B 



■ (=> i) 

x : B, x y,x : T (B A ->(J => B)) h y : B 

(=> H) 

x : B, x : T => (B A ->(T =>• B)) hi:T=>B 



... hi:T x : B, ai : -.(T B), x : T => (B A -.(T B)) h 

— (MP) (AL) 

... hi -Ux x : B A -i(T =4> B),x : T =>■ (B A -i(T => B)) h 

(=► 

x : T (B A -.(T => B)), x : T => (B A ->(T => B)) h 

(ContrL) 

x :T (B A -i(T => B)) h 

The sequent is not derivable without any application of (Contr L) on conditionals, 
as shown by the following tree: 

t. • R x — > ii h ii : R 

R) 

(AL) 

i:BAn(T^B)h 



\- x :T 

(MP) 



x : B, x — ) 


•yH 


y:B 


x : B \- x 


: T = 




x : B, x : ->( 


T => 





x : T => (B A -.(T => B)) h 

x : B, x — > y ^ y : B, where L? is an atom, cannot be proved. 

In order to obtain a decision procedure for this systems, we must control the 
application of the (Contr L) rule. We show that it is sufficient to apply (Contr L) 
at most once on each conditional formula x : A B in every branch of a proof 
tree; we say that contractions on non-conditional formulas and multiple contractions 
(more than one) on conditionals are redundant; we show that we can eliminate all 
the redundant contractions. 

Definition 4.24 Multiple contractions. Given a proof tree II , we say that 
one branch B of IT has multiple contractions if a contraction rule is applied to a 
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formula F n times, n > 1. 

Definition 4.25 Redundant contractions on a formula F. Given a proof 
tree II, we say that it has redundant contractions on a formula F if it has a branch 
B with at least one of the following conditions: 

(1) a contraction rule is applied to a non conditional formula F; 

(2) the right contraction rule (Contr R) is applied to a conditional formula F; 

(3) there are multiple contractions of (Contr L) on a conditional formula F. 

Definition 4.26 integer multiset ordering < m . Given T and A, multi- 
sets of integers, we say that: 

(1) T < m A ifT C A; 

(2) T < m A ifT < m A', where A' = A - { j } U { } and i < j. 

As it is well known. < m is a well-order on multisets. 

In the proof for bounding contractions in SeqMP and SeqID+MP we need the 
following: 

Lemma 4.27. If T, x : A => B, x : A B h A, x : A has a derivation U with no 
contractions on x : A => B in SeqMP (SeqID+MP), then T, x : A ^ B \- A, x : A 
is derivable in SeqMP (SeqID+MP) and it has a derivation which at most adds 
to the contractions in II contractions on formulas with lower complexities than the 
complexity of x : A => B. 

Proof. If an instance of x : A =>• B is introduced in II by implicit weakening, then 
we can conclude by deleting this weakening. If the two instances of x : A => B are 
both derived from (=> L) using transitions of the form x — > y, with x ^ y, then 
the contraction can be eliminated as in CK{+ID}. If an instance of x : A => B is 

introduced in II by an application of (=>• L) using a transition x — > x derived from 
(MP), then it permutes over the other rules in II; therefore, we have the following 
proof: 

T.x : A B h A.x : A.x : A 

— (MP) n B 

r,x:4^BhA,i:ii^i T,x : A ^ B,x : B \- A,x : A 

■ ■ ■ ■ ■ H L) 

T,x : A^ B,x : A^ B h A,x : A 

We can conclude the proof by adding a contraction on the sub-formula x : A as 
follows: 

IU 

r, x : A => B h A, x : A, x : A 

(Contr R) 

T,x : A^ B h A,x : A 

□ 

Definition 4.28 c(II). Given a proof tree H we define c(Tl) as the multiset of 
integers of the complexities of the formulas to which are applied redundant contrac- 
tions in II. 
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For example, consider a proof tree II having three branches with the following fea- 
tures: a contraction on a formula x : A — > B with complexity 7 and two applications 
of (Contr L) on x : C => D with complexity 5 in the left branch; an application 
of (Contr L) on a conditional formula x : E =>■ F with complexity 9 in the central 
branch; two contractions on an atomic formula (complexity 2) and three contrac- 
tions (Contr L) on x : G => H with complexity 5 in the right branch. We have that 
c(II)={7, 5, 2, 5} (the contraction in the central branch is not redundant). 

We can control the application of the contractions in SeqMP and SeqID+MP as 
explained by the following: 

Theorem 4.29 Bound for the contractions in SeqMP and SeqID+MP. 
Given a sequent h xq : D, derivable in SeqMP or in SeqID+MP, then it has a 
derivation where there is at most one application of ( Contr L) on each conditional 
formula x : A => B in every branch of the proof tree. In other words, we can find a 
derivation of it with no redundant contractions. 

Proof (Sketch). Using the results of the previous subsections, we can say, without 
loss of generality, that the sequent h xq ■ D has a derivation II with no applications 
of (Contr R) on conditional formulas and no contractions on transitions. Then, 
we proceed by induction on the multiset ordering defined by c(II). The idea is the 
following: at each step of the proof, we build a proof tree II such that c(II ) < m 
c(II), to which we apply the inductive hypothesis; II is obtained by removing the 
redundant contraction on a formula with complexity M such that M = max(c(H)). 
We can have two different situations: 

(1) the redundant contractions on formulas with complexity M are deleted with- 
out adding any other contraction in the proof tree; therefore, we have that 

c (n')=c(n) - { M }; 

(2) the redundant contractions on formulas with complexity M are replaced by 
redundant contractions on formulas with complexities Mi, M 2 , Mk, where 
Mi < M. c(II ) is then obtained by replacing an occurrence of M in c(il) with 
the values Mi, M 2 , M k . 

We only present the most interesting case; the entire proof is contained in [Pozzato 
2003], pages 163-198. 

Consider a branch B with n applications of (Contr L), n > 1, on x : A B, where 
maa;(c(II)) = cp(a;: A B); we can consider that all the n contractions are applied 
in sequence, then we consider the upper two instances of (Contr L) and proceed to 
eliminate the upper one: 

n 

T, x: A =S> B, x: A B. x: A => B h A 
■ (ContrL) 

T,x : A^ B,x : A^ B h A 

(ContrL) 

r, x: A B h A V ' 

n 

h x : D 

IT does not contain any application of (Contr L) with constituent x : A =>■ B. 

We can also observe that an instance of x : A =^ B is the principal formula of the 
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sequent, by the permutability of the rules 9 . We present the following situation: the 
(=> L) rule is applied to T, x: A B, x: A =*> B, x: A =>• B h A using the label x: 



r, x: A ^ 5, x: A => B h A, x x T, x: A => B, x: A B, x: B h A 

T,x : A^ B,x : A^ B,x : A Bh A 

(ContrL) 

T,x: A=>B,x: A=>B\-A 

(ContrL) 

r, x: A => B h A V ' 

n 

A 

If the transition formula x — > a; is introduced by implicit weakening, then we 
have that T, x: A => B, x: A => 5 h A is derivable and we can immediately 

conclude (the upper (Contr L) has been eliminated); if x — > x is not introduced 
by weakening, it can only be treated (looking backward) by the (MP) rule, then we 
consider the following proof: 

n; 

T, x: A B. x: A => B h A, x: A 

■ (MP) n 2 

r, x : A => B, x : A =>• B h x x, A r, x: A => B, x: A => B, x: B h A 

T,x:A=>B,x:A=>B,x:A=>B\- A 

(ContrL) 

T,x : A^ B,x : A^ B h A 

(ContrL) 

r, x: A => B h A ^ ; 

n 

By Lemma 4.27, r, a;: j4 => B h A, x: ^4 is derivable with a proof IP that does 
not add any contraction on x : A => £?; we can obtain: 

IP 

r, a;: A B h A, x: A 

(MP) 



{=> L) 



r,i:A^BhA,i^i 

Our target is now to find a proof tree II2, with no contractions on x : A B, of 
the sequent T , x : A ^ B , x : B h A. Consider the case when both the occurrences 
of x : A =>■ B are introduced in II2 by the (=> L) rule. We analyze the situation in 
which an occurrence of x : A B is introduced by (=> L) by using the label x; we 



9 As we explained above, (=>■ L) does not always permute over the (=> R) rule. We can assume, 
without loss of generality, that x : A => B is the principal formula since, if all its three instances 
are derived by (=> L) and the labels used are introduced by R) in n, then we can permute (=> 
R) over the contractions; therefore, (=> L) can be permuted over the rules of El. 

ACM Transactions on Computational Logic, Vol. V, No. N, Month 20YY. 



34 ■ Nicola Olivetti et al. 

can then consider the following proof tree: 

T, x: A B, x: B h A, x: A 

— (MP) n B 

r, x : A => B, x : B h A, x x T, x: A =>■ B, x: B, x: B \- A 

1 ! 1 ! (=> L) 

T,x : A^ B,x : A^ B,x : B h A 

ITyi and lis do not contain any application of (Contr L) on x : A =>■ i?, then we 
have the following proof: 

r, a;: 4 => B, a:: 5, x: B h A 

(ContrL) 

r,i:4^B,i:BhA 

The other cases, when both the conditionals x : A => _B arc introduced without 
using the label x in the applications of (=>■ L), are left to the reader. 

We have found two proofs, with no contractions on x: A => 5, at most introducing 
contractions on formulas with lower complexity than the complexity of x: A =>■ B, 

of the sequents r, x: A =^ B h a; — > a;, A and T, a;: A => B, a;: B h A. We can 
then obtain the following proof, erasing the upper application of (Contr L) in the 
initial proof tree : 

IP 

r,i:A4Bh A, x: A 
— (MP) W 2 

r,i:4=>BhA,i^i r, x: A B, x: B h A 

! ' ' (=*• L) 

T,x : A B,x : A => B h A 

(ContrL) 

r, x: A B h A V y 

n 

□ 

4.4 Reformulation of SeqMP and SeqID+MP 

In the previous subsection we have found that, in SeqMP and SeqID+MP, the 
left contraction rule (Contr L) is only needed if applied to conditional formulas 
x : A =>■ B and, in particular, at most once on each formula occurring in every 
derivation branch of a proof tree. By this fact, we can reformulate the calculi for 
these two systems, obtaining BSeqMP and BSeqID+MP (the prefix B stands 
for "bounded contractions") with the following features: 

(1) proof trees do not contain redundant contractions; 

(2) contractions on x : A => B are absorbed into the (=> L) rule. 

First of all, we represent a single node of a proof tree as 

K | * | T h A 

K is the set containing all the conditional formulas that have already been con- 
tracted in that branch of the proof tree. The antecedent of a sequent is then split 
into two parts: 
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K U {x -. A B} | * U {a; : A B} | r' h x y, A 

(=> L)i X U {x : A => B} | * U {x : A => B} \ y : B, r' h A 

,j/ xiA^B^if 

K | «f | x: A=^B, T hA 

K \ 9 \ T h x -^-* y, A K | * | y : B, T h A 

(=> L )2 ; ,i/ x : A =^ B 6 K 

K | * | x : A => B,T hA 

if' U {x : A => B} | *' | T h x j/, A 
(=>L) 3 K' U {x : A=> B} | *' | y : B,T h A 

if' U {x : A => B} | *' U {x : A =>• B} | T h A 

| | u : A h u : B | | u : B h u : A 
(EQ) 5 ; 5 ; 



Fig. 5. Sequent calculi BScqMP and BScqID+MP. 

(1) the set \1> of the conditional formulas duplicated by contraction; 

(2) the multiset T with the other formulas. 

(=>■ L) is split in three rules: 

(1) (=>■ L)i is applied to x : A =$* B € T if x : A B does not belong to K, i.e. 
if this conditional formula has not yet been contracted in that branch. The 
principal formula x : A =>■ B is decomposed and a copy of it is added to W and 
to K; 

(2) (=> L)2 is applied to x : A ^> B E T if x : A ^> B belongs to K, i.e. it has 
already been contracted in that branch. The conditional formula x : A =>■ B is 
decomposed without adding any copy of it in the auxiliary sets VP and K; 

(3) (=> L) 3 is applied to i : 4 ^ B £ $, i.e. x : A ^ B has been previously 
duplicated by an application of (=> L)i. The principal formula x : A =>■ _B is 
decomposed without adding any copy of it in the auxiliary sets \P and K. 

In other words, if a conditional formula x : A =>• B in T has not been duplicated in 
a branch, then it is decomposed by (=> L)i, which adds a copy of it in K and in vf. 
if keeps trace of duplicated formulas in that branch. Duplicated conditionals in ^ 
will be only decomposed, but no duplicated. If x : A =>• B in T has already been 
duplicated in a branch, i.e. x : A =>■ _B belongs to K, it is only decomposed and no 
further duplicated. 

Sequent calculi BSeqMP and BSeqID+MP are shown in Figure 5; we omit the 
reformulation for axioms and some rules, since they arc identical to ScqS's rules 
(see Figures 1 and 2) with the exception of the form of the sequents. 
Next theorem follows immediately from the above reformulation: 

Theorem 4.30. A sequent V h A is derivable in SeqMP (SeqID+MP) if and 
only if 9 | | T h A is derivable in BSeqMP (BSeqID+MP). 
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We give a derivation in BSeqMP of the sequent x : T (B A ->(T => £?)) h, 
introduced at the beginning of the previous subsection as an example of sequent 
derivable in SeqMP with a necessary application of the left contraction on condi- 
tionals: 

{i:T=>(J)A -i(T => B))} | {x : T => (B A -.(T =4> B))} |h a; -i> a 
{i : T => (J) A -i(T => B))} | {x : T => (B A -.(T B))} | s : B A ->(T => B) h 

(=> L)i 

| | x : T => (B A^(T => B)) h 

The upper premise is derived as follows: 

{x : T =» (g A -n(T =» £))} | {x : T =» (g A ^(T =» B))} |h x : T 

{x : T => (B A -n(T => B))} {i:T4(BA ->(T =>■ £?))} |h x a: 
The other one has the following derivation: 

{x : T => (B A -.(T => B))} | | x — !-> y, x : B,y : B, y : -i(T B) h j/ : B 

y (AL) 

(i : T =i> (5 A -.(T ^ B))} | | a; — — » y,x : B,y ; B A -i(T =S- B) h j/ : B n 
7 (=> i)s 

{x : T => (B A -.(T => B))} | {x : T => (B A -.(T =>■ B))} | x — — » y,x : B h y : B 

(=> R) 

{x : T =s> (B A ->(T =>• B))} | {x : T =S> (B A -.(T => B))} i:Bhi:T=i>B 

hL) 

(i:T=>(5A -.(T B))} {i:T=|.(BAn(T=i. B))} | x : B, x : -.(T B) h 

(AL) 

{x : T => (B A -i(T => B))} (i:T^(BA -.(T =S> B))} | x : B A -i(T => B) h 

where II is the axiom {x : T => (L? A -i(T => £?))} | | x — — ► y, x : B h x — — > y, y : 
S. 

4.5 Complexity of CK{+ID} 

Since we can eliminate contraction, it is relatively easy to prove both decidability 
and a space complexity bound. 

In a proof without contractions, in all rules the premises have a smaller complex- 
ity than the conclusion. By this fact we get that the length of each branch in a 
proof of a sequent h x : D is bounded by 0(\ D \). 

Moreover, observe that the rules are analytic, so that the premises contains only 
(labelled) subformulas of the formulas in the conclusion. In the search of a proof 
of h .To : D, with | D \= n, new labels are introduced only by (positive) conditional 
subformulas of D. Thus, the number of different labels occurring in a proof is 
0(n); it follows that the total number of distinct labelled formulas is 0(n 2 ), and 
only 0(n) of them can actually occur in each sequent. 

This itself gives decidability: 

Theorem 4.31 CK{+ID} decidability. Logic CK{+ID] is decidable. 

Proof. We just observe that there is only a finite number of derivations to check of 
a given sequent h xo : D, as both the length of a proof and the number of labelled 
formulas which may occur in it is finite. 

□ 

Notice that, as usual, a proof may have an exponential size since the branching 
introduced by the rules. However we can obtain a much sharper space complexity 
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bound using a standard technique [Hudelmaier 1993; Vigano 2000], namely we 
do not need to store the whole proof, but only a sequent at a time plus additional 
information to carry on the proof search. In searching a proof there are two kinds of 
branching to consider: AND-branching caused by the rules with multiple premises 
and OR-branching (backtracking points in a depth first search) caused by the choice 
of the rule to apply, and how to apply it in the case of (=> L). 

We store only one sequent at a time and maintain a stack containing information 
sufficient to reconstruct the branching points of both types. Each stack entry con- 
tains the principal formula (either a labelled sentence x; B, or a transition formula 

x — —> y), the name of the rule applied and an index which allows to reconstruct 
the other branches on return to the branching points. The stack entries represent 
thus backtracking points and the index within the entry allows one to reconstruct 
both the AND branching and to check whether there are alternatives to explore 
(OR branching). The working sequent on a return point is recreated by replaying 
the stack entries from the bottom of the stack using the information in the index 
(for instance in the case of (=>■ L) applied to the principal formula x : A =>• B, the 
index will indicate which premise-first or second-we have to expand and the label 

A 

y involved in the transition formula x — > y). 

A proof begins with the end sequent h xq : D and the empty stack. Each rule 
application generates a new sequent and extends the stack. If the current sequent is 
an axiom we pop the stack until we find an AND branching point to be expanded. 
If there are not, the end sequent h xq : D is provable and we have finished. If the 
current sequent is not an axiom and no rule can be applied to it, we pop the stack 
entries and we continue at the first available entry with some alternative left (a 
backtracking point). If there are no such entries, the end sequent is not provable. 

The entire process must terminate since: (i) the depth of the stack is bounded 
by the length of a branch proof, thus it is 0(n), where \ D \= n, (ii) the branching 
is bounded by the number of rules, the number of premises of any rule and the 
number of formulas occurring in one sequent, the last being 0(n). 

To evaluate the space requirement, we have that each subformula of the initial 
formula can be represented by a positional index into the initial formula, which 
requires O(logn) bits. Moreover, also each label can be represented by O(logn) 
bits. Thus, to store the working sequent we need 0(n logn) space, since there may 
occur 0(n) labelled subformulas. Similarly, each stack entry requires O(logn) bits, 
as the name of the rule requires constant space and the index 0(log n) bits. Having 
depth 0(n), to store the whole stack requires 0(n logn) space. Thus we obtain: 

Theorem 4.32 Space complexity of CK{+ID}. Provability in CK{+ID} is 
decidable in 0(n logn) space. 

4.6 Decidability and Complexity of CK+MP{+ID} 

Let us conclude this section with a quick analysis of the systems CK+MP{+ID}. 
We explained above that we cannot eliminate the (Contr L) rule on conditional for- 
mulas in SeqMP and SeqID+MP systems; however, we can control its application, 
in order to obtain a decision procedure for these logics, too. 
We can prove the following: 
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Theorem 4.33 CK+MP{+ID} decidability. Logic CK+MP{+ID} is decid- 
able. 

Proof. It is easy to prove that BSeqMP and BSeqID+MP terminate, from which we 
obtain a decision procedure for logics CK+MP and CK+MP+ID. As we explained 
above, the (Contr L) rule is absorbed by the (=> L) rule; a conditional formula 
x : A => B is contracted at most one time on each branch with an application of 
(=>■ L)i and (eventually) the following application of L)3, therefore the length 
of each branch in a proof is limited, as only a finite number of conditional formulas 
can be introduced in that branch. 

□ 

Let us say something about the space complexity of BSeqMP and BScqID+MP. 
These systems are decidable in exponential space in the number of nested con- 
ditional formulas. Consider, for example, an application of the (=> L)i rule with 
principal formula x : A± (A 2 =>■ B), which introduces the subformula y : A2 =>• B 
in the antecedent of one premise and is duplicated in K; if the L)i rule is also 
applied to y : A2 => B, then it is duplicated in K, too, obtaining two copies of 
x : Ai =>■ (A 2 B) and two of y : A 2 => B. And so on, for every nested condi- 
tional formula (if B is a conditional formula C D, eight formulas are generated). 

A more detailed analysis on the structure of conditionals in the initial sequent 
is needed to refine these complexity results. By the relation between CK+MP and 
modal logic T, we strongly conjecture that provability for both BSeqMP and BSc- 
qID+MP is decidable in 0(n 2 Zo<7n)-space. Vigano presents a substructural analysis 
for modal system T (chapter 10 of [Vigano 2000]) that could inspire a refinement of 
the exponential complexity bound we obtained by the previous informal discussion. 

5. CONDLEAN: A THEOREM PROVER FOR CONDITIONAL LOGICS 

In this section we present CondLcan, a theorem prover implementing the sequent 
calculi SeqS; it is a SICStus Prolog program inspired by leanTAP [Beckert and 
Posegga 1995] . The program comprises a set of clauses, each one of them represents 
a sequent rule or axiom. The proof search is provided for free by the mere depth-first 
search mechanism of Prolog, without any additional ad hoc mechanism. CondLean 
is available for free download at http : //www . di .unito . it/~olivetti/CONDLEAN . 

We represent each component of a sequent (antecedent and consequent) by a 
list of formulas, partitioned into three sub-lists: atomic formulas, transitions and 
complex formulas. Atomic and complex formulas are represented by a list like 
[x,a], where x is a Prolog constant and a is a formula. A transition x — > y is 
represented by [x,a,y]. For example, the sequent x : A B, x : A => C, x — > 
y \- y : B,x : C, x : A ^ B is represented by the following lists (the upper one 
represents the antecedent, the lower one represents the consequent): 

[[] , [[x.a.y]] , [[x,a=>b] , [x,a=>c]]] 
[[y,b] , [x,c]] , [] , [[x,a->b]] 

We present three different implementations: 

(1) a constant labels version; 
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(2) a free-variables version; 

(3) an heuristic version. 

The constant labels version makes use of Prolog constants to represent SeqS's labels. 
The sequent calculi are implemented by the predicate 

prove(Sigma, Delta, Labels). 

This predicate succeeds if and only if £ h A is derivable in SeqS, where Sigma and 
Delta are the lists representing the multisets £ and A, respectively and Labels is 
the list of labels introduced in that branch. For example, to prove 

x: {B A C) 10 h x: A => B, x: C 

in CK, one queries CondLean with the goal: 

prove( [[],[], [[x, a=>(b and c)]]] , [[[x,c] , [] , [[x, a=>b]]] , [x] ) . 

Each clause of prove implements one axiom or rule of SeqS; for example, the clause 
implementing (=> L) is: 

prove( [LitSigma,TransSigma,ComplexSigma] , [LitDelta,TransDelta, 

ComplexDelta] , Labels) :- 
select( [X,A=>B] ,ComplexSigma,ResComplexSigma) , member (Y, Labels) , 
put( [Y,B] .LitSigma.ResComplexSigma.NewLitSigma.NewComplexSigma) , 
prove( [LitSigma,TransSigma,ResComplexSigma] , 

[LitDelta, [[X,A,Y] |TransDelta] .ComplexDelta] .Labels) , 
prove( [NewLitSigma.TransSigma.NewComplexSigma] , 

[LitDelta, TransDelta, ComplexDelta] .Labels) . 

The predicate select removes [X,A=>B] from ComplexSigma returning 
ResComplexSigma as result. The predicate put is used to put [Y,B] in the proper 
sub- list of the antecedent. 

To search a derivation of a sequent Eh A, CondLean proceeds as follows. First of 
all, if E h A is an axiom, the goal will succeed immediately by using the clauses 
for the axioms. If it is not, then the first applicable rule will be chosen, e.g. if 
ComplexSigma contains a formula [X,A and B] , then the clause for (A L) rule will 
be used, invoking prove on the unique premise of (A L). CondLean proceeds in a 
similar way for the other rules. The ordering of the clauses is such that the ap- 
plication of the branching rules is postponed as much as possible. When the (=>■ 
L) clause is used to prove £ h A, a backtracking point is introduced by the choice 
of a label Y occurring in the two premises of the rule; in case of failure, Prolog's 
backtracking tries every instance of the rule with every available label (if more than 
one). Choosing, sooner or later, the right label to apply (=> L) may strongly affect 
the theorem prover's efficiency: if there are n labels to choose for an application 
of (=> L) the computation might succeed only after n-1 backtracking steps, with a 
significant loss of efficiency 

Our second implementation, called free-variables, makes use of Prolog variables 
to represent all the labels that can be used in a single application of the (=> L) rule. 



CondLean extends the sequent calculi to formulas containing also -i, A, V and T. 
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This version represents labels by integers starting from 1; by using integers we can 
easily express constraints on the range of the variable-labels. To this regard the 
library clpf d is used to manage free-variable domains (see [Marriott and Stuckcy 
1998] and [Jaffar and Michaylov 1987] for details about the constraints satisfaction 
problems and the constraint logic programming). As an example, in order to prove 
£ , 1: A => B h A the theorem provcr will call prove on the following premises: £ 

A ' 

h A, ] — > V and V: B, £ h A, where V is a Prolog variable. This variable will be 
then instantiated by Prolog's pattern matching to apply either the (EQ) rule, or to 
close a branch with an axiom. Here below is the clause implementing the (=>■ L) rule: 

prove( [LitSigma,TransSigma,ComplexSigma] , [LitDelta, 
TransDelta,ComplexDelta] ,Max) : - 
select([X,A => B] ,ComplexSigma,ResComplexSigma) , 
domain ([Y] ,l,Max) , Y#>X, 

put ( [Y,B] ,LitSigma,ResComplexSigma,NewLitSigma,NewComplexSigma) , 
prove( [NewLitSigma,TransSigma,NewComplexSigma] , 

[LitDelta, TransDelta, ComplexDelta] ,Max) , 
prove( [LitSigma,TransSigma,ResComplexSigma] , 

[LitDelta, [[X,A,Y] |TransDelta] .ComplexDelta] ,Max) . 

The atom Y#>X adds the constraint Y>X to the constraint store: the constraints 
solver will verify the consistency of it during the computation. In ScqCK and Sc- 
qlD we can only use labels introduced after the label X, thus we introduce the 
previous constraint. In SeqMP and SeqID+MP we can also use X itself, thus we 
shall add the constraint Y#>=X. 

The third argument of predicate prove is Max and is used to define variables do- 
mains. 

On a sequent with 65 labels on the antecedent this version succeeds in 460 mseconds, 
whereas the constant labels version takes 4326 mseconds. 

We have also developed a third version, called heuristic version, that performs 
a "two- phase" computation: in "Phase 1" an incomplete theorem prover searches 
a derivation exploring a reduced search space; in case of failure, the free-variables 
version is called (" Phase 2" ) . Intuitively, the reduction of the search space in Phase 
1 is obtained by committing the choice of the label to instantiate a free variable, 
whereby blocking the backtracking. 

For SeqMP and SeqID+MP, we have developed a theorem prover which simplifies 
the reformulations given by BScqMP and BSeqLD+MP. In particular, the reformu- 
lation given in the previous section uses two different auxiliaries sets, namely K 
and "f, whereas the theorem prover implements only "f, by introducing another 
argument CondContr to the predicate prove; therefore, only (=>- L)i and (=>■ L)3 
are implemented. The prove predicate now becomes: 

prove(Sigma, Delta, Labels, CondContr). 

The list CondContr stores the conditional formulas of the antecedent that have been 
duplicated so far. When (=> L) is applied to a formula x: A =4> B in the antecedent, 
the formula is duplicated at the same time into the CondContr list; when L) is 
applied to a formula in CondContr, in contrast, the formula is no longer duplicated. 
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Thus the (=>■ L) rule is split in two rules, one taking care of "unused" conditionals 
of the antecedent, the other taking care of "used" (or duplicated) conditionals. 
Observe that this ensures termination. To understand the difference between the 
calculus and CondLean implementation, we can observe that the calculus BScqMP 
(BScqID+MP) ensures that every conditional formula x : A =>• B is duplicated only 
once, no matter how many times it occurs in a branch. As a difference, CondLean 
ensures that every occurrence of x : A => B is duplicated at most once. However, 
we have chosen of implementing this simplified version since it is easier and, at the 
current state, it is not clear if the exact implementation of BScqMP (BScqID+MP) 
would perform significantly better. 

5.1 Performances of the Theorem Prover 

The performances of the three versions of the theorem prover are promising even 
on a small machine. To test our program we used samples generated by modifying 
the samples from [Beckert and Gore 1997] and from [Vigano 2000]. 

We have tested CondLean, SeqCK system, obtaining the following results 11 : 

(1) the constant labels version succeeds in 79 tests over 90 in less than 2 seconds 
(78 in less than one second); 

(2) the free-variables version succeeds in 73 tests over 90 in less than 2 seconds 
(but 67 in less than 10 mscconds); 

(3) the heuristic version succeeds in 78 tests over 90 in less than 2 seconds (70 in 
less than 500 mseconds). 

Considering the sequent-degree (defined as the maximum level of nesting of the 
=> operator) as a parameter, we have the following results, obtained by testing the 
SeqCK free-variables version: 



Sequent degree 


2 


6 


9 


11 


15 


Time to succeed (mseconds) 


5 


500 


650 


1000 


2000 



We have also tested CondLean, SeqMP system, on some scqucnts that require 
duplications of conditional formulas; in particular, we have obtained the following 
results running the heuristic version on an AMD Athlon XP 2400+ (2.0 GHz), 512 
MB RAM machine, using SICStus Prolog 3.11.1: 



Sequent 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


Number of applications of (=> L)3 


1 


1 


2 


2 


2 


1 


2 


3 


4 


5 


Time to succeed (mseconds) 


1 


2500 


1 


1 


1 


1 


1 


1 


1 


1 



As expected, in (MP) systems the free-variables version offers better performances 
than the constant label version; in the following tabic we show how many sequents 
have been derived by each implementation in less than 1 ms, 1 second and 2 seconds 
over 97 valid sequents: 



Time to succeed 


1ms 


Is 


2s 


Constant labels 


61 


66 


67 


Free- variables 


75 


82 


82 



11 These results are obtained running SICStus Prolog 3.10.0 on an Intel Pentium 166 MMX, 96 
MB RAM machine. 
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6. CONCLUSIONS, COMPARISON WITH OTHER WORKS AND FUTURE WORK 

In this work we have provided a labelled calculus for minimal conditional logic CK, 
and its standard extensions with conditions ID and MP. The calculus is cut-free 
and analytic. By a proof-theoretical analysis, we have shown that CK and CK+ID 
arc dccidable in 0(n logn) space. We have also introduced a decision procedure 
for CK+MP and CK+MP+ID. To the best of our knowledge, sequent calculi for 
these logics have not been previously studied and the complexity bound for these 
conditional systems is new. 

We have also developed CondLean, a theorem prover implementing the calculus 
written in SICStus Prolog. 

We briefly remark on some related works. Most of the works have concentrated 
on extensions of CK. 

Dc Swart [de Swart 1983] and Gent [Gent 1992] give sequent/tableaux calculi for 
the strong conditional logics VC and VCS. Their proof systems are based on the 
entrenchment connective <, from which the conditional operator can be defined. 
Their systems are analytic and comprise an infinite set of rules < F(n,m), with 
a uniform pattern, to decompose each sequent with m negative and n positive 
entrenchment formulas. 

Crocco and Farinas [Crocco and del Cerro 1995] present sequent calculi for some 
conditional logics including CK, CEM, CO and others. Their calculi comprise two 
levels of sequents: principal scqucnts with hp correspond to the basic deduction 
relation, whereas auxiliary sequents with h a correspond to the conditional operator: 
thus the constituents of V hp A are sequents of the form X h a Y, where X, Y are 
sets of formulas. 

Artosi, Governatori, and Rotolo [Artosi et al. 2002] develop labelled tableau for 
the first-degree fragment (i.e. without nested conditionals) of the conditional logic 
CU that corresponds to cumulative non-monotonic logics. In their work they use 
labels similarly to ours. Formulas are labelled by path of worlds containing also 
variable worlds (see also our free- variable implementation). Differently from us, 
they do not use a specific rule to deal with equivalent antecedents of conditionals. 
They use instead a unification procedure to propagate positive conditionals. The 
unification process itself provides to check the equivalence of antecedents. Their 
tableau system is not analytic, since it contains a cut-rule, called PB, which is not 
eliminable. Moreover it is not clear how to extend it to nested conditionals. 

Lamarrc [Lamarre 1993] presents tableaux systems for the conditional logics V, 
VN, VC, and VW. Lamarre's method is a consistency-checking procedure which 
tries to build a system of sphere falsifying the input formulas. The method makes 
use of a subroutine to compute the core, that is defined as the set of formulas 
characterizing the minimal sphere. The computation of the core needs in turn the 
consistency checking procedure. Thus there is a mutual recursive definition between 
the procedure for checking consistency and the procedure to compute the core. 

Groeneboer and Delgrandc [Dclgrande and Groeneboer 1990] have developed a 
tableau method for the conditional logic VN which is based on the translation of 
this logic into the modal logic S4.3. 

[Giordano et al. 2003] have defined a labelled tableaux calculus for the logic CE 
and some of its extensions. The flat fragment of CE corresponds to the nonmono- 
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tonic preferential logic P and admits a semantics in terms of preferential structures 
(possible worlds together with a family of preference relations) . The tableau calcu- 
lus makes use of pseudo-formulas, that are modalities in a hybrid language indexed 
on worlds. In that paper it is shown how to obtain a decision procedure for that 
logic by performing a kind of loop checking. 

Finally, complexity results for some conditional logics have been obtained by 
Friedman and Halpcrn [Friedman and Halpern 1994]. Their results are based on a 
semantic analysis, by an argument about the size of possible countermodels. 

In the future, we intend to continue our work in two directions: 

(1) We want to investigate if it is possible to develop sequent calculi based on the 
selection function semantics for stronger conditional logics (than CK+MP+ID). 
If this is possible, we would like to extend CondLean to support these stronger 
systems. 

(2) We hope to increase the efficiency of our theorem prover CondLean by experi- 
menting standard refinements and heuristics. 

REFERENCES 

Artosi, A., Governatori, G., and Rotolo, A. 2002. Labelled tableaux for non-monotonic 
reasoning: Cumulative consequence relations. Journal of Logic and Computation, 12(6): 1027- 
1060. 

Beckert, B. and Gore, R. 1997. Free variable tableaux for propositional modal logics. Tableaux- 
97, LNCS 1221, Springer, 91-106. 

Beckert, B. and POSEGGA, J. 1995. lcantap: Lean tableau-based deduction. Journal of Auto- 
mated Reasoning, 15(3), 339-358. 

Bell, J. 1990. The logic of nonmonotonicity. Artificial Intelligence, 41(3), 365-374. 

Boutilier, C. 1994. Conditional logics of normality: a modal approach. Artificial Intelligence, 
68(1), 87-154. 

Chellas, B. F. 1975. Basic conditional logics. Journal of Philosophical Logic, 4, 133—153. 

COSTELLO, T. and McCarthy, J. 1999. Useful counterfactuals. ETAI (Electronic Transactions 
on Artificial Intelligence), Vol. 3, Section A. 

CrOCCO, G. and del Cerro, L. F. 1995. Structure, consequence relation and logic, volume 4. 
In D. Gabbay (ed.), What is a Logical System, Oxford University Press, 239-259. 

CrOCCO, G., del Cerro, L. F., and Herzig, A. 1995. Conditionals: From philosophy to computer 
science. Oxford University Press, Studies in Logic and Computation. 

CROCCO, G. AND Lamarre, P. 1992. On the connection between non-monotonic inference sys- 
tems and conditional logics. In B. Nebel and E. Sandewall editors, Principles of Knowledge 
Representation and Reasoning: Proceedings of the 3rd International Conference, 565-571. 

DE Swart, H. C. M. 1983. A Gentzen-or Beth-type system, a practical decision procedure and a 
constructive completeness proof for the countcrfactual logics VC and VCS. Journal of Symbolic 
Logic, 48(1), 1-20. 

Delgrande, J. P. 1987. A first-order conditional logic for prototypical properties. Artificial 

Intelligence, 33(1), 105-130. 
Delgrande, J. P. 1988. An approach to default reasoning based on a first-order conditional 

logic: Revised report. Artificial Intelligence, 36(1), 63-90. 
Delgrande, J. P. and Groeneboer, C. 1990. A general approach for determining the validity of 

commonsense assertions using conditional logics. International Journal of Intelligent Systems, 

5(5), 505-520. 

Fitting, M. 1983. Proof methods for modal and intuitionistic logic. Vol 169 of Synthese library, 

D. Reidel, Dorderecht. 
Fitting, M. 1998. leantap revisited. Journal of Logic and Computation, 8(1), 33-47. 

ACM Transactions on Computational Logic, Vol. V, No. N, Month 20YY. 



44 



Nicola Olivetti et al. 



Friedman, N. and Halpern, J. 1994. On the complexity of conditional logics. In Principles 
of Knowledge Representation and Reasoning: Proceedings of the 4th International Conference, 
KR 1994 , 202-213. 

Friedman, N. and Halpern, J. 1999. Belief revision: a critique. Journal of Logic, Language and 

Information, 8(4), 401-420. 
Gabbay, D. M. 1996. Labelled deductive systems (vol i). Oxford Logic Guides, Oxford University 

Press. 

Gabbay, D. M., Giordano, L., Martelli, A., Olivetti, N., and Sapino, M. L. 2000. Condi- 
tional reasoning in logic programming. Journal of Logic Programming 44 (1-3), 37—74. 

Gardenfors, P. and Rott, H. 1995. Belief revision. Handbook of Logic in Artificial Intelligence 
and Logic Programming, Volume 4, ed. by D. M. Gabbay, C. J. Hogger, and J. A. Robinson, 
Oxford University Press. 

Gent, I. P. 1992. A sequent or tableaux-style system for Lewis's counterfactual logic VC. Notre 
Dame Journal of Formal Logic, 33(3), 369-382. 

Ginsberg, M. L. 1986. Counterfactuals. Artificial Intelligence, 30(1), 35-79. 

Giordano, L., Gliozzi, V., and Olivetti, N. 1998. A conditional logic for belief revision. In 
Proc. European Workshop on Logics in Artificial Intelligence JELIA 98, Springer LNAI 1489, 
294-308. 

Giordano, L., Gliozzi, V., and Olivetti, N. 2002. Iterated belief revision and conditional logic. 
Studia Logica 70(1), 23-47. 

Giordano, L., Gliozzi, V., Olivetti, N., and Schwind, C. 2003. Tableau calculi for preference- 
based conditional logics. In Proc. of TABLEAUX 2003 (Automated Reasoning with Analytic 
Tableaux and Related Methods), volume 2796 of LNAI, Springer, 81-101. 

Giordano, L. and Schwind, C. 2004. Conditional logic of actions and causation. Artificial 
Intelligence 157, 1-2, 239-279. 

Grahne, G. 1998. Updates and counterfactuals. In Journal of Logic and Computation, 8(1):, 
87-117. 

Hudelmaier, J. 1993. An Oin log ra)-space decision procedure for intuitionistic propositional 
logic. Journal of Logic and Computation, 3(1), 63-75. 

Jaffar, J. AND MlCHAYLOV, S. 1987. Methodology and implementation of a clp system. J.L. 
Lassez (ed.), Logic Programming - Proceedings of the 4th International Conference - Volume 
1, MIT Press, Cambridge, MA, 196-218. 

KRAUS, S., Lehmann, D., and MAGIDOR, M. 1990. Nonmonotonic reasoning, preferential models 
and cumulative logics. Artificial Intelligence, 44(l-%)> 167-207. 

Lamarre, P. 1992. Etude des raisonnements non-monotones: Apports des logiques des condi- 
tionnels et des logiques modales. PhD thesis, Universite Paul Sabatier, Toulouse. 

Lamarre, P. 1993. A tableaux provcr for conditional logics. In Principles of Knowledge Repre- 
sentation and Reasoning: Proceedings of the 4th International Conference, 572—580. 

Lewis, D. 1973. Counterfactuals. Basil Blackwell Ltd. 

LlNDSTROM, S. AND Rabinowicz, W. 1992. Belief revision, epistemic conditionals and the Ramsey 

test. Synthese 91 , 195-237. 
Marriott, K. and Stuckey, P. J. 1998. Programming with constraints: An introduction. MIT 

Press. 

Nute, D. 1980. Topics in conditional logic. Reidel, Dordrecht. 

Obeid, N. 2001. Model-based diagnosis and conditional logic. Applied Intelligence, 14, 213—230. 
Olivetti, N. and Pozzato, G. L. 2003. Condlean: A theorem prover for conditional logics. 

In Proc. of TABLEAUX 2003 (Automated Reasoning with Analytic Tableaux and Related 

Methods), volume 2796 of LNAI, Springer, 264-270. 
Olivetti, N. and Schwind, C. B. 2000. Analytic tableaux for conditional logics. Technical 

Report, University of Torino. 
Olivetti, N. and Schwind, C. B. 2001. A calculus and complexity bound for minimal conditional 

logic. Proc. ICTCS01 - Italian Conference on Theoretical Computer Science, vol LNCS 2202, 

384-404. 



ACM Transactions on Computational Logic, Vol. V, No. N, Month 20YY. 



A Sequent Calculus and a Theorem Prover for Standard Conditional Logics • 45 



POZZATO, G. L. 2003. Dcduzionc automatica per logiche condizionali: Analisi e sviluppo di un 
theorem prover. Test di laurea, Informatica, Universita di Torino. In Italian, download at 
http://www. di. unito.it/ ~ pozzato/tesiPozzato.html. 

Schwind, C. B. 1999. Causality in action theories. Electronic Transactions on Artificial Intelli- 
gence (ETAI), 3(A), 27-50. 

Stalnaker, R. 1968. A theory of conditionals. In N. Rescher (ed.), Studies in Logical Theory, 
American Philosophical Quarterly, Monograph Series no. 2, Blackwell, Oxford, 98-112. 

VlGANO, L. 2000. Labelled non-classical logics. Kluwer Academic Publishers, Dordrecht. 



ACM Transactions on Computational Logic, Vol. V, No. N, Month 20YY. 



